$ rpki-client -vvf rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft File: mQaocNrdFPbUuobyzCweXkcN6LI.mft (raw, json) Hash identifier: kzhEQj2MGsvrRqT6LszkfhJMQUnFosTEI9K54o+gIJw= Subject key identifier: 12:29:3A:9C:52:8D:5C:08:33:7B:53:28:AF:DA:67:7A:CD:7C:B7:A3 Authority key identifier: 99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 Certificate issuer: /CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Certificate serial: F4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft Manifest number: EA Signing time: Wed 01 May 2024 06:14:49 +0000 Manifest this update: Wed 01 May 2024 06:14:48 +0000 Manifest next update: Wed 08 May 2024 06:14:48 +0000 Files and hashes: 1: mQaocNrdFPbUuobyzCweXkcN6LI.crl (hash: 3N1HyL0PKaa6lASCfbGctS89MtBMNBy1cSkYHuo/WYI=) 2: 62F0214E4E4F11EEB53AAA72C4F9AE02.roa (hash: Ay7zs1vbUvuiGBUzSAIsAQOZ+4xjHzR0vqWfzaWXybU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 08 May 2024 06:14:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 244 (0xf4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9130416/serialNumber=9906A870DADD14F6D4BA86F2CC2C1E5E470DE8B2 Validity Not Before: May 1 06:14:48 2024 GMT Not After : May 8 06:14:48 2024 GMT Subject: CN=6631ddd8-a21f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:46:f3:a0:d2:76:5f:14:f9:eb:22:47:1b:b5: 44:29:75:9c:b9:cc:ae:2c:d1:76:52:05:41:da:ff: a8:d4:1f:9f:e9:cf:c5:d0:c4:2c:5b:8a:38:04:b6: 17:a7:81:0b:f0:df:e2:84:a0:b1:97:a1:bc:cd:28: 47:ee:f2:a4:e1:a7:76:8f:05:3c:1b:ac:04:2b:18: e2:3c:1b:c3:69:0b:f1:e1:e6:a9:13:f3:b2:bf:82: bd:67:b5:fc:f4:89:4e:15:d3:bc:74:dd:02:98:2b: cd:2b:9d:54:81:1e:79:07:00:fb:46:7d:d9:81:b6: 84:8e:9b:ec:28:d4:52:b6:f7:0e:86:7f:f3:14:c3: 01:b1:72:79:ee:8d:ef:72:b4:89:8d:1e:50:14:72: b7:fc:49:ff:a6:1f:21:16:7b:9f:74:f5:41:d7:d4: 5f:31:9a:70:c1:dd:18:39:36:ff:79:1c:39:9f:10: 75:26:9a:48:32:07:d0:c2:a9:25:e8:03:bb:39:f4: 9d:17:b2:28:c5:9b:79:68:1b:9b:56:01:24:3d:4f: dd:5b:2b:d9:43:6e:08:5e:3b:f3:55:fe:6d:4b:e5: 95:4e:ea:30:38:0c:d2:53:68:f3:51:1f:8e:4b:51: ad:d8:69:52:4e:cb:6e:4d:4f:0d:b8:ef:3d:22:34: 2a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:29:3A:9C:52:8D:5C:08:33:7B:53:28:AF:DA:67:7A:CD:7C:B7:A3 X509v3 Authority Key Identifier: keyid:99:06:A8:70:DA:DD:14:F6:D4:BA:86:F2:CC:2C:1E:5E:47:0D:E8:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mQaocNrdFPbUuobyzCweXkcN6LI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130416/CA6D58B4B67411EDBEB60F39C4F9AE02/mQaocNrdFPbUuobyzCweXkcN6LI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:92:94:38:e8:24:c4:4e:f2:00:69:1d:0c:69:a0:c2:a8:6a: 51:32:dc:7e:95:16:f7:8b:17:bd:f5:95:09:c1:dd:33:0a:a9: c8:08:27:2a:41:74:a3:ee:73:5f:c7:3a:03:11:65:74:08:ea: 0b:e0:8e:6e:ea:90:60:af:43:01:d7:5b:2b:f4:77:89:4e:e1: 5e:19:1b:7a:a5:b0:78:29:eb:22:a5:72:48:44:bf:6e:c6:28: 27:f6:8b:6f:5e:ff:3d:9c:08:09:83:74:c1:ad:28:ad:24:74: df:00:40:bb:67:09:69:d7:de:97:a0:17:d2:66:20:62:30:4f: 92:3d:7b:5d:46:82:1f:50:f9:c6:84:f8:20:10:f1:ad:1a:2d: 3e:de:a1:3e:fc:c7:45:df:44:d7:0e:29:6d:98:1f:6c:89:68: 60:fb:19:0c:90:af:98:53:7c:8e:d4:4b:d9:6d:15:cb:59:8a: e0:86:d3:87:e2:d6:9f:71:44:23:8d:62:a1:35:9b:bb:b8:c2: 12:c2:c6:f1:e5:22:73:ee:8e:fd:5c:c9:f2:43:73:18:bb:d0: ad:78:f4:1f:c2:95:38:b2:28:c8:da:e5:8c:8e:db:5a:6d:25: c5:72:a1:37:0d:ad:0a:6d:73:5f:ab:f4:da:42:9f:6a:c7:69: 3e:79:32:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0MTYxMTAvBgNVBAUTKDk5MDZBODcwREFERDE0RjZENEJBODZGMkNDMkMxRTVF NDcwREU4QjIwHhcNMjQwNTAxMDYxNDQ4WhcNMjQwNTA4MDYxNDQ4WjAYMRYwFAYD VQQDEw02NjMxZGRkOC1hMjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUbzoNJ2XxT56yJHG7VEKXWcucyuLNF2UgVB2v+o1B+f6c/F0MQsW4o4BLYX p4EL8N/ihKCxl6G8zShH7vKk4ad2jwU8G6wEKxjiPBvDaQvx4eapE/Oyv4K9Z7X8 9IlOFdO8dN0CmCvNK51UgR55BwD7Rn3ZgbaEjpvsKNRStvcOhn/zFMMBsXJ57o3v crSJjR5QFHK3/En/ph8hFnufdPVB19RfMZpwwd0YOTb/eRw5nxB1JppIMgfQwqkl 6AO7OfSdF7IoxZt5aBubVgEkPU/dWyvZQ24IXjvzVf5tS+WVTuowOAzSU2jzUR+O S1Gt2GlSTstuTU8NuO89IjQqAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBIpOpxS jVwIM3tTKK/aZ3rNfLejMB8GA1UdIwQYMBaAFJkGqHDa3RT21LqG8swsHl5HDeiy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDQxNi9DQTZENThCNEI2 NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQYlV1b2J5ekN3ZVhrY042 TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21RYW9jTnJkRlBiVXVvYnl6Q3dlWGtjTjZMSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDQxNi9DQTZENThCNEI2NzQxMUVEQkVCNjBGMzlDNEY5QUUwMi9tUWFvY05yZEZQ YlV1b2J5ekN3ZVhrY042TEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkkpQ46CTETvIAaR0MaaDCqGpRMtx+lRb3ixe99ZUJwd0zCqnICCcq QXSj7nNfxzoDEWV0COoL4I5u6pBgr0MB11sr9HeJTuFeGRt6pbB4KesipXJIRL9u xign9otvXv89nAgJg3TBrSitJHTfAEC7Zwlp196XoBfSZiBiME+SPXtdRoIfUPnG hPggEPGtGi0+3qE+/MdF30TXDiltmB9siWhg+xkMkK+YU3yO1EvZbRXLWYrghtOH 4tafcUQjjWKhNZu7uMISwsbx5SJz7o79XMnyQ3MYu9CtePQfwpU4sijI2uWMjtta bSXFcqE3Da0KbXNfq/TaQp9qx2k+eTKk -----END CERTIFICATE-----Generated at Wed May 1 07:06:27 2024 by rpki-client on console-fra.rpki-client.org